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DETAILED ACTION 

The Request for Continued Examination has been accepted and entered. 

Response to Arguments 

Applicant's arguments filed 1 1/26/06 with respect to claims 1,9, 12, 14, 16, 18 and 20 
have been considered but are moot in view of the new ground(s) of rejection in view of 
Freund 2003/0055962 

Applicant's arguments filed 1 1/26/06 have been fully considered but they are not 
persuasive. Applicant's argues determining a current location based "solely" on the IP 
address. This argument is not persuasive because the examiner cannot find support in the 
instant specification for the negative limitation. If there is support in the instant 
specification the examiner would encourage the applicant to include it their response. 

Claim Objections 

Claim 1 is objected to because of the following informalities: the examiner believes "net- 
work" on line 13 should be "network". Appropriate correction is required. 

Claim Rejections - 35 USC § 112 
The following is a quotation of the first paragraph of 35 U.S.C. 1 12: 

The specification shall contain a written description of the invention, and of the manner and process of making 
and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the art to which it 
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pertains, or with which it is most nearly connected, to make and use the same and shall set forth the best mode 
contemplated by the inventor of carrying out his invention. 

Claim 1 is rejected under 35 U.S.C. 1 12, first paragraph, as failing to comply with the 
enablement requirement. The claim(s) contains subject matter which was not described 
in the specification in such a way as to enable one skilled in the art to which it pertains, or 
with which it is most nearly connected, to make and/or use the invention. Claims 1,9, 12, 
14, 16, 18, and 20 are rejected for containing the negative limitation "solely". The 
examiner invites the applicant to specify in the instant specification support for this 
limitation. The examiner notes several places that mention "IP address", but no specific 
location where it is stated that only, or solely the IP address is used. 

Claim Rejections - 35 USC §103 
2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 1-5, 8, 10, 12, and 14 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Freund US 2003/0167405. in view of Freund US 2003/0055962. 

As per claims 1,12, and 14, Freund 4 405 teaches the ability to detect when a client is 
connected to different networks, and using different security settings depending on the 
network [0073]. Freund '405 teaches determining the network the client is connected to 
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in part by detecting the IP address, [0078], [0088]. Freund c 405 teaches gathering 
identification data from a predetermined network element [0087]. Freund '405 teaches 
the firewall determining between a trusted and untrusted network, [0097]. Freund '405 
teaches providing the client with different rules, and enabling the rules depending on 
location, [0074]. Freund '405 does not specifically teach connecting to a network to 
obtain information. 

Freund '962 teaches connecting to a network and sending a request to a predetermined 
network element [0092], [0125]. Freund '962 teaches the predetermined network 
element sends a response with the required data to verify the current location[0127]. It is 
inherent that the predetermined network element (router) will only be able to respond if 
the client is attached to that particular network. Freund '962 teaches selecting different 
rules based on set groups or zones. 

It would have been obvious to one of ordinary skill in the art to use the firewall of 
Freund '405 with the predetermined network element verification of Freund '962 in order 
to confirm the security rules for the firewall. 

As per claim 2, Freund '405 teaches providing the client with different rules, and 
enabling the rules depending on location, [0074]. 

As per claim 3, Freund '405 teaches using one set of rules by changing groups [0080]. 
As per claim 4, and 5 Freund '405 teaches storing the IP address off the home network 
and determining if the firewall is in said home network [0142], [0078], [0099]. 
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As per claim 8 Freund '405 teaches that the networks element responds when client is in 
the network of the current IP, and verifies this information also with a MAC address, 
[0078]. 

As per claim 10, Freund '405 teaches that the user defines the networks in a trusted zone, 
and that when the mobile computer moves in from network to network, it queries the new 
network in the trusted zone,[0073], [0078]. 

Claims 9, 16, 17, and 19 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Freund US 2003/0167405 in view of Freund US 2003/0055962 in view of 
Schneier US 2002/0087882. 

As per claims 9, 16, 17, and 19, Freund '405 teaches the ability to detect when a client is 
connected to different networks, and using different security settings depending on the 
network [0073]. Freund '405 teaches determining the network the client is connected to 
in part by detecting the IP address, [0078], [0088 Freund '405 teaches gathering 
identification data from a predetermined network element [0087]. Freund '405 teaches 
the firewall determining between a trusted and untrusted network, [0097]. Freund '405 
teaches providing the client with different rules, and enabling the rules depending on 
location, [0074]. Freund '405 does not specifically teach connecting to a network to 
obtain information. 

Freund '405 does not teach updating the firewall rules via a centralized unit. 
Freund '962 teaches connecting to a network and sending a request to a predetermined 
network element [0092], [0125]. Freund '962 teaches the predetermined network 
element sends a response with the required data to verify the current location[0127]. It is 
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inherent that the predetermined network element (router) will only be able to respond if 
the client is attached to that particular network. Freund 6 962 teaches selecting different 
rules based on set groups or zones. 

It would have been obvious to one of ordinary skill in the art to use the firewall of Freund 
'405 with the predetermined network element verification of Freund '962 in order to 
confirm the security rules for the firewall. 

Schneier teaches a centralized unit manages updates to software including updates to 
firewall software, [0037]. 

It would have been obvious to one of ordinary skill in the art to combine the firewall 
system of Freund '405 with the central firewall update system of Schneier because the 
central system allows all clients on the trusted system to maintain the same security 
policy. 

Claims 11, 18, and 20 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over by Freund US 2003/0167405 in view of Sheikh US 2002/0078382 
As per claims 11, 18, and 20 

Freund '405 teaches the ability to detect when a client is connected to different networks, 
and using different security settings depending on the network [0073]. Freund '405 
teaches determining the network the client is connected to in part by detecting the IP 
address, [0078], [0088]. Freund '405 teaches gathering identification data from a 
predetermined network element [0087]. Freund '405 teaches the firewall determining 
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between a trusted and untrusted network, [0097]. Freund '405 teaches providing the 
client with different rules, and enabling the rules depending on location, [0074]. Freund 
'405 does not specifically teach connecting to a network to obtain information. 
Freund '405 does not teach updating the firewall rules via a centralized unit. Freund 
'405 teaches maintaining a log, [0141]. Freund '405 does not teach updating a 
centralized log server with collected logs of the firewall. 

Freund '962 teaches connecting to a network and sending a request to a predetermined 
network element [0092], [0125]. Freund '962 teaches the predetermined network 
element sends a response with the required data to verify the current location[0127]. It is 
inherent that the predetermined network element (router) will only be able to respond if 
the client is attached to that particular network. Freund '962 teaches selecting different 
rules based on set groups or zones. 

It would have been obvious to one of ordinary skill in the art to use the firewall of Freund 
'405 with the predetermined network element verification of Freund '962 in order to 
confirm the security rules for the firewall. 

Sheikh teaches gathering logs from a firewall and transporting them and archiving them 
in a central server, [0082]. 

It would have been obvious to one of ordinary skill in the art to use the logs of Freund 
'405 in the central server of Sheikh so that the network wide logs could be inspected and 
analyzed. 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Christopher J. Brown whose telephone number is 
(571)272-3833. The examiner can normally be reached on 8:30-6:00. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on (571)272-381 1. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO 
Customer Service Representative or access to the automated information system, call 
800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Christopher J. Brown 2/14/07 




